If you are going to access from the outside always you can add one layer of security by configuring a VPN to which you can protect the access with x 509 certificates username and password and systems of prevention such as fail2ban among others

Add punctuation
If you are going to access from the outside always you can add one layer of security by configuring a VPN, to which you can protect the access with x 509 certificates, username and password, and systems of prevention such as fail2ban among others.